Cookie Policy
Last updated: 2026-04-19
This Cookie Policy describes the cookies and similar technologies used by Handedover, operated via biowissen.ai. It supplements our Privacy Policy. The operator is: biowissen.ai operator — full legal entity details to be added before first external user.
1. What cookies are
Cookies are small text files stored on your device by your browser. They allow sites to remember you across requests — for example, to keep you signed in. Similar technologies (localStorage, sessionStorage) work the same way.
2. Cookies we use
We only use cookies that are strictly necessary for the Service to work. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies that identify you.
| Name | Purpose | Type | Retention |
|---|---|---|---|
| sb-access-token, sb-refresh-token | Keep you signed in (Supabase auth) | Strictly necessary | Session / up to 30 days |
| handedover-lang | Remember your language preference (DE / EN) | Strictly necessary | 12 months |
| __Host-next-csrf / similar | Cross-site request forgery protection | Strictly necessary | Session |
3. Usage analytics (optional)
If you opt in to anonymous usage analytics on the consent screen, we store an anonymous rotating identifier in localStorage so we can measure aggregate flows (e.g. how many people complete a handover). It is never joined to your account. You can revoke this consent in Settings → Privacy.
4. Third-party cookies
Sign-in via Google or Microsoft will redirect you to those providers, who set their own cookies under their respective policies. If you connect a Google Calendar, Google may set session cookies during the OAuth flow. We do not embed advertising or social-media pixels on the Service.
5. Controlling cookies
Because we only set strictly-necessary cookies, no cookie banner is shown for those — they are required for the Service to function. You can still block or delete cookies in your browser, but doing so will prevent sign-in from working.
6. Changes
If we add any new cookies beyond strictly necessary ones, we will update this page and, where required, ask for your consent first.
7. Contact
Questions? Email privacy@biowissen.ai.